CVE-2026-29124 HIGH

CVE-2026-29124: Multiple SUID Root Binaries in `monitor` User Home Directory Leading to Potential Local Privilege Escalation

Vendor International Datacasting Corporation
Product SFX2100 Satellite Receiver
Weakness CWE-269
Published March 5, 2026
Last update March 5, 2026
View on NVD All CVEs

CVSS base score

8.6/10
Attack vector Local
Attack complexity High
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N

What the vulnerability does

01Description

Multiple SUID root-owned binaries are found in /home/monitor/terminal, /home/monitor/kore-terminal, /home/monitor/IDE-DPack/terminal-dpack, and /home/monitor/IDE-DPack/terminal-dpack2 in International Data Casting (IDC) SFX2100 Satellite Receiver, which may lead to local privlidge escalation from the `monitor` user to root

Key dates

02Disclosure timeline

March 5, 2026 CVE published
March 5, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-32003 Dusk plugin may allow unfettered user authentication in misconfigured installs CVE-2025-6723 Untrusted user data can lead to privilege escalation CVE-2020-7509 CVE-2026-6897 Wishlist Member <= 3.30.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Options Update via 'wishlistmember_team_accounts_save_settings' AJAX action CVE-2026-22804 Termix has a Stored XSS in File Manager leading to Local File Inclusion (LFI) in Electron and Session Hijacking in Browser